@@ -1,4 +1,37 @@

 -------------------------------------------------------------------

+Mon Dec 29 15:17:23 UTC 2014 - cs@linux-administrator.com

+

+- removed cacti-0.8.8b_COMMENT.patch

+- update to release 0.8.8c

+   bug#0002228: GPL incompatible files included in Cacti project in include/treeview

+   bug#0002383: Sanitize the step and id variables CVE-2013-5588, CVE-2013-5589

+   bug#0002385: Cannot export host templates while including dependencies

+   bug#0002386: cli/upgrade_database.php is missing the last two releases

+   bug#0002390: Poller/script issue with slash and backslash

+   bug#0002405: SQL injection in graph_xport.php

+   bug#0002431: CVE-2014-2326 Unspecified HTML Injection Vulnerability

+   bug#0002432: CVE-2014-2327 Cross Site Request Forgery Vulnerability - Special Thanks to Deutsche Telekom CERT

+   bug#0002433: CVE-2014-2328 Unspecified Remote Command Execution Vulnerability

+   bug#0002434: Suppress SNMP UNITS Suffix from cacti_snmp_get() output

+   bug#0002438: Down Host Detection issue when using SNMP Desc or SNMP getNext

+   bug#0002446: Subtract plugin processing time from Poller sleep time

+   bug#0002453: CVE-2014-4002 Cross-Site Scripting Vulnerability - Special Thanks to G. Geshev (munmap)

+   bug#0002455: Incomplete and incorrect input parsing leads to remote code execution and SQL injection attack scenarios

+   bug#0002456: CVE-2014-5025 / CVE-2014-5026 - Cross-Site Scripting Vulnerability - Special Thanks to Adan Alvarez and Paul Gevers

+   bug: Fix COMMENT handling, even in case COMMENT is empty, with or without HR and with variable substitution

+   bug: Fix issues when SNMP data holds a "="; "explode" must be treated accordingly

+   bug: Fix filter highlighting on data sources for the data template field

+   bug: correct description of SNMP V3 parameters

+   feature: Added native jquery, jqueryui, and jstree

+   feature: Fixed issues with 'Clear' under preview not working

+   feature: Added new Tree navigation

+   feature: Added Columns and Thumbnails to Preview

+   feature: Added Columns to Tree (Preview only)

+   feature: Both Graphs and Columns default to 'Default'

+   feature: Resolved Left hand navigation taking entire page

+   feature: Added new graph zoom to tree view and preview offering a "quick" (default) and an "advanced" mode 

+

+-------------------------------------------------------------------

 Sat Mar 15 15:45:31 UTC 2014 - cs@linux-administrator.com

 - update spec

​

@@ -12,7 +12,7 @@

 Name:           cacti

 BuildRequires:  apache2-devel libapr-util1-devel pcre-devel

-Version:        0.8.8b

+Version:        0.8.8c

 Release:        1

 Summary:        Web Front-End to Monitor System Data via RRDtool

 License:        GPL v2 or later

@@ -23,7 +23,7 @@

 Source2:        %{name}-httpd.conf

 Source3:        %{name}.logrotate

 Patch0:         %{name}-%{version}-cacti-log-path.patch

-Patch1:        cacti-0.8.8b_COMMENT.patch

+##Patch1:      cacti-0.8.8b_COMMENT.patch

 Requires:       http_daemon net-snmp rrdtool php 

 Recommends:    mod_php_any

 Recommends:    php-fpm

@@ -53,7 +53,7 @@

 %prep

 %setup -q

 %patch0

-%patch1

+## % patch1

 %build

 find . -iname \*.orig -exec rm {} \;

​